CVE-2009-1326
Mini-stream RM Downloader 3.0.0.9 - Stack-based Buffer Overflow via Long URI in Playlist File
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2009-1326. PoCs published by Vinod Sharma, Cyber-Zone, Stack.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in RM Downloader 3.0.2.1 via a maliciously crafted M3U file. It leverages a JMP ESP instruction from RDcodec02.dll to execute shellcode that spawns calc.exe.
Description
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
Exploits (7)
This exploit targets a stack overflow vulnerability in RM Downloader 3.0.2.1 via a maliciously crafted M3U file. It leverages a JMP ESP instruction from RDcodec02.dll to execute shellcode that spawns calc.exe.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in RM Downloader when parsed. The exploit uses a long HTTP URL (26109 'A' characters) to overwrite the EIP register, demonstrating a classic buffer overflow vulnerability.
This exploit targets a stack overflow vulnerability in RM Downloader 3.0.0.9 via a maliciously crafted .m3u file. It uses a long HTTP URL followed by a return address and shellcode to achieve remote code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in WM Downloader when parsed. The exploit uses a long HTTP URL (26121 'A' characters) to overwrite the stack and control EIP, demonstrating a classic buffer overflow vulnerability.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream RM-MP3 Converter when opened. The exploit uses a long HTTP URL string to overwrite the stack, leading to arbitrary code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream Ripper when opened. The exploit uses a long HTTP URL string (26129 'A' characters) to overwrite the stack, leading to arbitrary code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in ASX to MP3 Converter when processed. The exploit uses a long HTTP URL string (26121 'A' characters) to overwrite the stack and crash the application, demonstrating a buffer overflow vulnerability.